FilesExpand file tree

main

/

defaults.go

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

118 lines (105 loc) · 3.44 KB

main

/

defaults.go

Copy path

Top

File metadata and controls

• Code
• Blame

118 lines (105 loc) · 3.44 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

// Copyright 2024 The Go Authors. All rights reserved.

// Use of this source code is governed by a BSD-style

// license that can be found in the LICENSE file.

package reality

import (

"slices"

_ "unsafe" // for linkname

)

// Defaults are collected in this file to allow distributions to more easily patch

// them to apply local policies.

// tlsmlkem=0 restores the pre-Go 1.24 default key exchanges.

//var tlsmlkem = godebug.New("tlsmlkem")

// tlssecpmlkem=0 restores the pre-Go 1.26 default key exchanges.

//var tlssecpmlkem = godebug.New("tlssecpmlkem")

// defaultCurveEnabled returns whether the key exchange c is enabled by default.

func defaultCurveEnabled(c CurveID) bool {

switch c {

case X25519, CurveP256, CurveP384, CurveP521:

return true

case X25519MLKEM768:

return true//tlsmlkem.Value() != "0"

case SecP256r1MLKEM768, SecP384r1MLKEM1024:

return true//tlsmlkem.Value() != "0" && tlssecpmlkem.Value() != "0"

default:

return false

}

}

// curvePreferenceOrder is the fixed preference order of key exchanges. It must

// include every supported key exchange.

func curvePreferenceOrder() []CurveID {

return []CurveID{

X25519MLKEM768, SecP256r1MLKEM768, SecP384r1MLKEM1024, MLKEM1024,

X25519, CurveP256, CurveP384, CurveP521,

}

}

// defaultSupportedSignatureAlgorithms returns the signature and hash algorithms that

// the code advertises and supports in a TLS 1.2+ ClientHello and in a TLS 1.2+

// CertificateRequest. The two fields are merged to match with TLS 1.3.

// Note that in TLS 1.2, the ECDSA algorithms are not constrained to P-256, etc.

func defaultSupportedSignatureAlgorithms() []SignatureScheme {

return []SignatureScheme{

MLDSA44,

MLDSA65,

MLDSA87,

PSSWithSHA256,

ECDSAWithP256AndSHA256,

Ed25519,

PSSWithSHA384,

PSSWithSHA512,

PKCS1WithSHA256,

PKCS1WithSHA384,

PKCS1WithSHA512,

ECDSAWithP384AndSHA384,

ECDSAWithP521AndSHA512,

PKCS1WithSHA1,

ECDSAWithSHA1,

}

}

func supportedCipherSuites(aesGCMPreferred bool) []uint16 {

if aesGCMPreferred {

return slices.Clone(cipherSuitesPreferenceOrder)

} else {

return slices.Clone(cipherSuitesPreferenceOrderNoAES)

}

}

func defaultCipherSuites(aesGCMPreferred bool) []uint16 {

cipherSuites := supportedCipherSuites(aesGCMPreferred)

return slices.DeleteFunc(cipherSuites, func(c uint16) bool {

return disabledCipherSuites[c]

})

}

// defaultCipherSuitesTLS13 is also the preference order, since there are no

// disabled by default TLS 1.3 cipher suites. The same AES vs ChaCha20 logic as

// cipherSuitesPreferenceOrder applies.

//

// defaultCipherSuitesTLS13 should be an internal detail,

// but widely used packages access it using linkname.

// Notable members of the hall of shame include:

// - github.com/quic-go/quic-go

// - github.com/sagernet/quic-go

//

// Do not remove or change the type signature.

// See go.dev/issue/67401.

//

//go:linkname defaultCipherSuitesTLS13

var defaultCipherSuitesTLS13 = []uint16{

TLS_AES_128_GCM_SHA256,

TLS_AES_256_GCM_SHA384,

TLS_CHACHA20_POLY1305_SHA256,

}

// defaultCipherSuitesTLS13NoAES should be an internal detail,

// but widely used packages access it using linkname.

// Notable members of the hall of shame include:

// - github.com/quic-go/quic-go

// - github.com/sagernet/quic-go

//

// Do not remove or change the type signature.

// See go.dev/issue/67401.

//

//go:linkname defaultCipherSuitesTLS13NoAES

var defaultCipherSuitesTLS13NoAES = []uint16{

TLS_CHACHA20_POLY1305_SHA256,

TLS_AES_128_GCM_SHA256,

TLS_AES_256_GCM_SHA384,

}